addssopasskey[.]comDomain
Reported by 1 independent source · first reported by Google Threat Intelligence · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments“Additionally, root domains such as portalpasskey.com and addssopasskey[.]com targeted organizations extorted by Falcon, while hosting intermediate targets that bridged directly into Helix infrastructure.”
Indicators reported together
named in the same reports- tucows[.]comin 1 report
- publicdomainregistry[.]comin 1 report
- passkeyhelpdesk[.]comin 1 report
- passkeydeploy[.]comin 1 report
- portalpasskey[.]comin 1 report
- passkeyms[.]comin 1 report
- mysecurepasskey[.]comin 1 report
- oskeysync[.]comin 1 report
- keysyncos[.]comin 1 report
- setupsso[.]comin 1 report
- idokta[.]comin 1 report
- passkeyuser[.]comin 1 report
- passkeyportal[.]comin 1 report
- createssopasskey[.]comin 1 report
- myoktasso[.]comin 1 report
- pipe[.]main 1 report
- mypasskeysso[.]comin 1 report
- setupssopasskey[.]comin 1 report
- mspasskey[.]comin 1 report
- activatepasskey[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.